@dbx-app/mcp-server 0.4.26 → 0.4.27

package/dist/index.js

@@ -3,7 +3,7 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { createRequire } from "node:module";
 import { z } from "zod";
-import { buildSchemaContext, createBackend, evaluateRedisCommandSafety, evaluateMongoAggregateSafety, evaluateSqlSafety, formatCell, formatSchemaContext, isMainModule, mdTable, notifyReload, parseMongoAggregateCommand, postBridge, sqlSafetyFromEnv, splitSqlStatements, } from "@dbx-app/node-core";
+import { buildSchemaContext, createBackend, evaluateRedisCommandSafety, evaluateMongoAggregateSafety, evaluateSqlSafety, formatCell, formatSchemaContext, isMainModule, mdTable, notifyReload, parseMongoAggregateCommand, assessProductionSql, isLikelyMongoMutation, isProductionDatabase, postBridge, sqlSafetyFromEnv, splitSqlStatements, } from "@dbx-app/node-core";
 const require = createRequire(import.meta.url);
 const packageJson = require("../package.json");
 export const DBX_MCP_PACKAGE_VERSION = packageJson.version ?? "0.0.0";
@@ -185,6 +185,13 @@ export function createDbxMcpServer(backend, options = {}) {
             const safety = evaluateSqlSafety(sql, { ...sqlSafetyFromEnv(), allowMultipleStatements: true });
             if (!safety.allowed)
                 return toolError("SQL_BLOCKED", safety.reason ?? "SQL blocked.");
+            const production = assessProductionSql(sql, scopedConfig, database ?? scope.database ?? scopedConfig.database);
+            if (production.active && production.isMutation) {
+                return toolError("PRODUCTION_WRITE_BLOCKED", "MCP cannot execute writes against a production database. Return the SQL for a user to review and run in DBX.");
+            }
+        }
+        else if (isProductionDatabase(scopedConfig, database ?? scope.database ?? scopedConfig.database) && isLikelyMongoMutation(sql)) {
+            return toolError("PRODUCTION_WRITE_BLOCKED", "MCP cannot execute writes against a production database. Return the command for a user to review and run in DBX.");
         }
         // MongoDB shell commands don't fit the SQL safety evaluator; the backend
         // (node-core executeQuery) applies command-aware read/write gating.
@@ -222,6 +229,9 @@ export function createDbxMcpServer(backend, options = {}) {
         const safety = evaluateRedisCommandSafety(command, sqlSafetyFromEnv());
         if (!safety.allowed)
             return toolError("REDIS_COMMAND_BLOCKED", safety.reason ?? "Redis command blocked.");
+        if (isProductionDatabase(scopedConfig, String(defaultRedisDb(scopedConfig, scope, db))) && safety.safety !== "allowed") {
+            return toolError("PRODUCTION_WRITE_BLOCKED", "MCP cannot execute write or dangerous Redis commands against a production database.");
+        }
         try {
             const result = await backend.executeRedisCommand(scopedConfig, defaultRedisDb(scopedConfig, scope, db), command, {
                 skipSafetyCheck: safety.skipSafetyCheck,
@@ -406,6 +416,17 @@ export function createDbxMcpServer(backend, options = {}) {
                 if (!safety.allowed)
                     return toolError("SQL_BLOCKED", safety.reason ?? "SQL blocked.");
             }
+            if (config?.db_type === "mongodb") {
+                if (isProductionDatabase(config, database ?? scope.database ?? config.database) && isLikelyMongoMutation(sql)) {
+                    return toolError("PRODUCTION_WRITE_BLOCKED", "MCP cannot send writes against a production database to DBX.");
+                }
+            }
+            else {
+                const production = assessProductionSql(sql, config, database ?? scope.database ?? config.database);
+                if (production.active && production.isMutation) {
+                    return toolError("PRODUCTION_WRITE_BLOCKED", "MCP cannot send writes against a production database to DBX.");
+                }
+            }
             // MongoDB shell commands bypass the SQL safety evaluator; pass MCP
             // safety flags to the desktop executor for command-aware gating.
             return bridgeRequest("/execute-query", {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dbx-app/mcp-server",
-  "version": "0.4.26",
+  "version": "0.4.27",
   "description": "MCP server for DBX — query databases from Claude Code, Cursor, and other AI agents",
   "keywords": [
     "ai-agent",
@@ -30,7 +30,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.1",
     "zod": "^3.25.20",
-    "@dbx-app/node-core": "^0.4.26"
+    "@dbx-app/node-core": "^0.4.27"
   },
   "devDependencies": {
     "@types/node": "^22.15.21",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/t8y2/dbx",
     "source": "github"
   },
-  "version": "0.4.26",
+  "version": "0.4.27",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@dbx-app/mcp-server",
-      "version": "0.4.26",
+      "version": "0.4.27",
       "transport": {
         "type": "stdio"
       }